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AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions, and listings of claims in the 
application: 

LISTING OF CLAIMS 



1 . (Original) A method for on-demand management of Intemet Protocol (IP) address 
pools, the method comprising: 

allocating an unused IP address from a local IP address pool designated for a remote 
domain if a request to connect to said remote domain is received, said local IP 
address pool comprising one or more of at least one subnet obtained from a 
global IP address pool, each of said at least one subnet specifying a contiguous 
set of one or more IP addresses; 

deallocating an IP address back to said local IP address pool if said IP address is 
unused; and 

apportioning one or more of said at least one subnet between said global IP address 
pool and said local IP address pool based upon utilization of said local IP 
address pool. 



2. (Original) The method of claim 1, fiirther comprising configuring said local IP 
address pool with a subnet from said at least one subnet. 



3. (Original) The method of claim 1 wherein said apportioning comprises: 

requesting one or more subnet from said global IP address pool if utilization of said 
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local IP address pool exceeds a first threshold; and 
releasing one or more subnet to said global IP address pool if utilization of said local 
IP address pool falls below a second threshold. 

4. (Original) The method of claim 3 wherein said apportioning further comprises 
polling said local IP address pool at predetermined intervals to obtain local IP 
address pool utilization information. 

5. (Original) The method of claim 3 wherein 

said requesting further comprises requesting a subnet having first predetermined 

mmiber of IP addresses; and 
said releasing further comprises releasing a subnet having a second predetermined 

number of IP addresses. 

6. (Original) The method of claim 3 wherein 

said requesting further comprises requesting a subnet having a size that is relative to 

a current subnet size; and 
said releasing further comprises releasing a subnet having a size that is relative to 

said current subnet size. 

7. (Original) The method of claim 3 wherein 

said requesting further comprises requesting a subnet having a size that is relative to 
an initial subnet size; and 
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said releasing fiirther comprises releasing a subnet having a size that is relative to 
said initial subnet size. 

8. (Currently Amended) The method of claim 3 wherein 

said requesting further comprises requesting a subnet having a predetermined size 

that is relativ e to a current subnet siz e; and 
said releasing further comprises releasing a subnet having a said predetermined size 

that is r e lative to said curr e nt subnet siz e. 

9. (Original) The method of claim 3 wherein said releasing further comprises removing 
the summarized route for said one or more subnet from a routing table associated 
with said local IP address pool. 

10. (Original) The method of claim 8 wherein said method further comprises inserting a 
route summary for said requested one or more subnet if said requested one or more 
subnet is received. 

11. (Original) The method of claim 8 wherein said method further comprises: 
inserting a route summary for a received one or more subnet and requesting one or 

more subnet if the size of said received one or more subnet is less than the size 
of said requested one or more subnet; 
inserting a route summary for said received one or more subnet if the size of said 
received one or more subnet equals the size of said requested one or more 



4 of 39 



Docket No.: CISCO-3376 
(032590-000143) 

subnet; 

mserting a route summary for said received one or more subnet if the size of said 
received one or more subnet is greater than the size of said requested one or 
more subnet and if the resulting local IP address pool utilization falls below said 
second threshold; and 

rejecting said received one or more subnet and requesting one or more subnet if the 
size of said received one or more subnet is greater than the size of said requested 
one or more subnet and if the resulting local EP address pool utilization does not 
fall below said second threshold. 

12. (Original) The method of claim 1 wherein said remote domain comprises a virtual 
private network (remote domain). 

13. (Original) A program storage device readable by a machine, embodying a program 
of instructions executable by the machine to perform a method for on-demand 
management of Internet Protocol (IP) address pools, the method comprising: 
allocating an unused IP address from a local EP address pool designated for a remote 

domain if a request to connect to said remote domain is received, said local IP 
address pool comprising one or more of at least one subnet obtained from a 
global IP address pool, each of said at least one subnet specifying a contiguous 
set of one or more IP addresses; 
deallocating an IP address back to said local IP address pool if said IP address is 
unused; and 
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apportioning one or more of said at least one subnet between said global IP address 
pool and said local IP address pool based upon utilization of said local IP 
address pool. 

14. (Original) The program storage device of claim 13, said method further comprising 
configuring said local IP address pool with a subnet firom said at least one subnet. 

15. (Original) The program storage device of claim 13 wherein said apportioning 
comprises: 

requesting one or more subnet from said global IP address pool if utilization of said 

local IP address pool exceeds a first threshold; and 
releasing one or more subnet to said global IP address pool if utilization of said local 

IP address pool falls below a second threshold. 

16. (Original) The program storage device of claim 15 wherein said apportioning fiirther 
comprises polling said local IP address pool at predetermined intervals to obtain 
local IP address pool utilization information. 

17. (Original) The program storage device of claim 15 wherein 

said requesting fiirther comprises requesting a subnet having first predetermined 

number of IP addresses; and 
said releasing fiirther comprises releasing a subnet having a second predetermined 

number of IP addresses. 
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18. (Original) The program storage device of claim 15 wherein 

said requesting further comprises requesting a subnet having a size that is relative to 

a current subnet size; and 
said releasing further comprises releasing a subnet having a size that is relative to 

said current subnet size. 

19. (Original) The program storage device of claim 15 wherein 

said requesting further comprises requesting a subnet having a size that is relative to 

an initial subnet size; and 
said releasing further comprises releasing a subnet having a size that is relative to 

said initial subnet size. 

20. (Currently Amended) The program storage device of claim 15 wherein 

said requesting further comprises requesting a subnet having a predetermined size 

that is r e lative to a curr e nt subn e t siz e; and 
said releasing further comprises releasing a subnet having a said predetermined size 

that is r e lative to said curr e nt subn e t siz e. 

21. (Original) The program storage device of claim 15 wherein said releasing further 
comprises removing the summarized route for said one or more subnet from a 
routing table associated with said local IP address pool. 

22. (Original) The program storage device of claim 20 wherein said method further 
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comprises inserting a route summary for said requested one or more subnet if said 
requested one or more subnet is received. 



23. (Original) The program storage device of claim 20 wherein said method farther 
comprises: 

inserting a route sunmiary for a received one or more subnet and requesting one or 

more subnet if the size of said received one or more subnet is less than the size 

of said requested one or more subnet; 
inserting a route summary for said received one or more subnet if the size of said 

received one or more subnet equals the size of said requested one or more 

subnet; 

inserting a route sunmiary for said received one or more subnet if the size of said 
received one or more subnet is greater than the size of said requested one or 
more subnet and if the resulting local IP address pool utilization falls below said 
second threshold; and 

rejecting said received one or more subnet and requesting one or more subnet if the 
size of said received one or more subnet is greater than the size of said requested 
one or more subnet and if the resulting local IP address pool utilization does not 
fall below said second threshold. 



24. (Original) The program storage device of claim 13 wherein said remote domain 
comprises a virtual private network (remote domain). 
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25. (Original) An apparatus for on-demand management of Internet Protocol (IP) 
address pools, the apparatus comprising: 

means for allocating an unused IP address from a local IP address pool designated 
for a remote domain if a request to connect to said remote domain is received, 
said local IP address pool comprising one or more of at least one subnet 
obtained from a global IP address pool, each of said at least one subnet 
specifying a contiguous set of one or more IP addresses; 

means for deallocating an IP address back to said local IP address pool if said IP 
address is unused; and 

means for apportioning one or more of said at least one subnet between said global 
IP address pool and said local IP address pool based upon utilization of said 
local IP address pool. 

26. (Original) The apparatus of claim 25, further comprising means for configuring said 
local IP address pool with a subnet from said at least one subnet. 

27. (Original) The apparatus of claim 25 wherein said means for apportioning 
comprises: 

means for requesting one or more subnet from said global IP address pool if 
utilization of said local IP address pool exceeds a first threshold; and 

means for releasing one or more subnet to said global IP address pool if utilization of 
said local IP address pool falls below a second threshold. 
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28. (Original) The apparatus of claim 27 wherein said means for apportioning further 
comprises means for polling said local IP address pool at predetermined intervals to 
obtain local IP address pool utilization information. 

29. (Original) The apparatus of claim 27 wherein 

said means for requesting further comprises means for requesting a subnet having 

first predetermined number of IP addresses; and 
said means for releasing further comprises means for releasing a subnet having a 

second predetermined number of IP addresses. 

30. (Original) The apparatus of claim 27 wherein 

said means for requesting further comprises means for requesting a subnet having a 

size that is relative to a current subnet size; and 
said means for releasing further comprises means for releasing a subnet having a size 

that is relative to said current subnet size. 

31. (Original) The apparatus of claim 27 wherein 

said means for requesting further comprises means for requesting a subnet having a 

size that is relative to an initial subnet size; and 
said means for releeising further comprises means for releasing a subnet having a size 

that is relative to said initial subnet size. 

32. (Currently Amended) The apparatus of claim 27 wherein 
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said means for requesting further comprises means for requesting a subnet having a 



said means for releasing further comprises means for releasing a subnet having a said 
predetermined size that is relative to said current subnet size . 

33. (Original) The apparatus of claim 27 wherein said means for releasing further 
comprises means for removing the summarized route for said one or more subnet 
from a routing table associated with said local IP address pool. 

34. (Original) The apparatus of claim 32 wherein said apparatus further comprises 
means for inserting a route summary for said requested one or more subnet if said 
requested one or more subnet is received. 

35. (Original) The apparatus of claim 32 wherein said apparatus further comprises: 
means for inserting a route summary for a received one or more subnet and means 

for requesting one or more subnet if the size of said received one or more subnet 
is less than the size of said requested one or more subnet; 
means for inserting a route summary for said received one or more subnet if the size 
of said received one or more subnet equals the size of said requested one or 
more subnet; 

means for inserting a route summary for said received one or more subnet if the size 
of said received one or more subnet is greater than the size of said requested one 
or more subnet and if the resulting local IP address pool utilization falls below 
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said second threshold; and 
means for rejecting said received one or more subnet and means for requesting one 
or more subnet if the size of said received one or more subnet is greater than the 
size of said requested one or more subnet and if the resulting local IP address 
pool utilization does not fall below said second threshold. 

36. (Original) The apparatus of claim 25 wherein said remote domain comprises a 
virtual private network (remote domain). 

37. (Original) An apparatus for on-demand management of Internet Protocol (IP) 
address pools, the apparatus comprising: 

an allocator to allocate an unused IP address from a local IP address pool designated 
for a remote domain if a request to connect to said remote domain is received, 
said local IP address pool comprising one or more of at least one subnet 
obtained from a global IP address pool, each of said at least one subnet 
specifying a contiguous set of one or more IP addresses, said allocator coupled 
to said local IP address pool; 

a deallocator to deallocate an IP address back to said local IP address pool if said IP 
address is unused, said deallocator coupled to said local IP address pool; and 

a monitor to apportion one or more of said at least one subnet between said global IP 
address pool and said local IP address pool based upon utilization of said local 
IP address pool, said monitor coupled to said local IP address pool and a global 
IP address pool interface. 
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38. (Original) The apparatus of claim 37, further comprising an IP address configurer to 
configure said local IP address pool with a subnet from said at least one subnet. 

39. (Original) The apparatus of claim 37 wherein said monitor comprises: 

a utilization assessor to assess utilization of said local IP address pool, said 

utilization assessor coupled to said local IP address pool; 
a subnet requestor to request a subnet from said global IP address pool if utilization 

of said local IP address pool exceeds a first threshold; 
a subnet receiver to receive said requested subnet and to forward said requested 

subnet to said local IP address pool, said subnet receiver coupled to said local IP 

address pool and said global IP address pool interface; and 
a subnet retimier to return a subnet to said local IP address pool if said utilization 

assessor indicates utilization of said local IP address pool is below a second 

threshold, said subnet returner coupled to said local IP address pool and said 

global IP address pool interface. 

40. (Original) The apparatus of claim 39 wherein said utilization assessor is further 
configured to poll said local IP address pool at predetermined intervals to obtain 
local IP address pool utilization information. 

41. (Original) The apparatus of claim 39 wherein 

said subnet requestor is further configured to request a subnet having first 
predetermined number of EP addresses; and 
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said subnet returner is further configured to release a subnet having a second 
predetermined number of IP addresses. 



42. (Original) The apparatus of claim 39 wherein 

said subnet requestor is further configured to request a subnet having a size that is 

relative to a current subnet size; and 
said subnet returner is fiirther configured to release a subnet having a size that is 

relative to said current subnet size. 



43. (Original) The apparatus of claim 39 wherein 

said subnet requestor is fiirther configured to request a subnet having a size that is 

relative to an initial subnet size; and 
said subnet returner is fiirther configured to release a subnet having a size that is 

relative to said initial subnet size. 



44. (Currently Amended) The apparatus of claim 39 wherein 

said subnet requestor is fiirther configured to request a subnet having a 

predetermined size that is r e lativ e to a curr e nt subn e t siz e; and 
said subnet returner is fiirther configured to release a subnet having a said 

predetermined size that i s relativ e to said current subnet size . 



45. (Original) The apparatus of claim 39 wherein said subnet retumer is fiirther 
configured to remove the summarized route for said one or more subnet fi-om a 
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routing table associated with said local IP address pool. 



46. (Original) The apparatus of claim 44 wherein said subnet receiver is further 
configured to insert a route summary for said requested one or more subnet if said 
requested one or more subnet is received. 

47. (Original) The apparatus of claim 44 wherein said subnet receiver is further 
configured to: 

insert a route summary for a received one or more subnet and requesting one or more 

subnet if the size of said received one or more subnet is less than the size of said 

requested one or more subnet; 
insert a route summary for said received one or more subnet if the size of said 

received one or more subnet equals the size of said requested one or more 

subnet; 

insert a route summary for said received one or more subnet if the size of said 
received one or more subnet is greater than the size of said requested one or 
more subnet and if the resulting local IP address pool utilization falls below said 
second threshold; and 

reject said received one or more subnet and requesting one or more subnet if the size 
of said received one or more subnet is greater than the size of said requested one 
or more subnet and if the resulting local IP address pool utilization does not fall 
below said second threshold. 
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48. (Original) The apparatus of claim 37 wherein said remote domain comprises a 
virtual private network (remote domain). 

49. (Original) The apparatus of claim 37 wherein 

said global IP address pool comprises an Authentication, Authorization and 

Accounting (AAA) server; and 
said global IP address interface comprises an AAA proxy configured to 

communicate with said AAA server using the RADIUS protocol. 

50. (Original) The apparatus of claim 37 wherein 

said global IP address pool comprises a Dynamic Host Configuration Protocol 
(DHCP) server; and 

said global IP address interface comprises a Ring Access Controller (RAC) client 
configured to communicate with said DHCP server using the DHCP protocol. 

51. (New) A method for on-demand management oflntemet Protocol (IP) address 
pools, the method comprising: 

allocating an unused IP address from a local IP address pool designated for a remote 
domain if a request to connect to said remote domain is received, said local IP 
address pool comprising one or more of at least one subnet obtained from a 
global IP address pool, each of said at least one subnet specifying a contiguous 
set of one or more IP addresses; 

deallocating an IP address back to said local IP address pool if said IP address is 
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unused; 

apportioning one or more of said at least one subnet between said global IP address 
pool and said local IP address pool based upon utilization of said local IP 
address pool, said apportioning further comprising: 

requesting one or more subnet from said global TP address pool if utilization of 
said local IP address pool exceeds a first threshold, said one or more subnet 
having a size that is relative to a current subnet size; and 

releasing one or more subnet to said global IP address pool if utilization of said 
local EP address pool falls below a second threshold, said one or more 
subnet having a size that is relative to said current subnet size; 
inserting a route sunmiary for a received one or more subnet and requesting one or 

more subnet if the size of said received one or more subnet is less than the size 

of said requested one or more subnet; 
inserting a route summary for said received one or more subnet if the size of said 

received one or more subnet equals the size of said requested one or more. 

subnet; 

inserting a route summary for said received one or more subnet if the size of said 
received one or more subnet is greater than the size of said requested one or 
more subnet and if the resulting local IP address pool utilization falls below said 
second threshold; and 

rejecting said received one or more subnet and requesting one or more subnet if the 
size of said received one or more subnet is greater than the size of said requested 
one or more subnet and if the resulting local IP address pool utiUzation does not 
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fall below said second threshold. 



52. (New) A program storage device readable by a machine, embodying a program of 
instructions executable by the machine to perform a method for on-demand 
management of Internet Protocol (IP) address pools, the method comprising: 
allocating an unused IP address from a local IP address pool designated for a remote 
domain if a request to connect to said remote domain is received, said local IP 
address pool comprising one or more of at least one subnet obtained from a 
global IP address pool, each of said at least one subnet specifying a contiguous 
set of one or more IP addresses; 
deallocating an IP address back to said local IP address pool if said JP address is 
unused; 

apportioning one or more of said at least one subnet between said global IP address 
pool and said local IP address pool based upon utilization of said local IP 
address pool, said apportioning fiirther comprising: 

requesting one or more subnet from said global IP address pool if utilization of 
said local IP address pool exceeds a first threshold, said one or more subnet 
having a size that is relative to a current subnet size; and 

releasing one or more subnet to said global IP address pool if utilization of said 
local IP address pool falls below a second threshold, said one or more 
subnet having a size that is relative to said current subnet size; 
inserting a route summary for a received one or more subnet and requesting one or 

more subnet if the size of said received one or more subnet is less than the size 
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of said requested one or more subnet; 
inserting a route summary for said received one or more subnet if the size of said 
received one or more subnet equals the size of said requested one or more 
subnet; 

inserting a route summary for said received one or more subnet if the size of said 
received one or more subnet is greater than the size of said requested one or 
more subnet and if the resulting local IP address pool utilization falls below said 
second threshold; and 

rejecting said received one or more subnet and requesting one or more subnet if the 
size of said received one or more subnet is greater than the size of said requested 
one or more subnet and if the resulting local IP address pool utilization does not 
fall below said second threshold. 

53. (New) An apparatus for on-demand management oflntemet Protocol (IP) address 
pools, the apparatus comprising: 

means for allocating an unused IP address from a local JP address pool designated 
for a remote domain if a request to connect to said remote domain is received, 
said local IP address pool comprising one or more of at least one subnet 
obtained from a global IP address pool, each of said at least one subnet 
specifying a contiguous set of one or more IP addresses; 

means for deallocating an IP address back to said local IP address pool if said IP 
address is unused; 

means for apportioning one or more of said at least one subnet between said global 
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IP address pool and said local IP address pool based upon utilization of said 

local IP address pool, said means for apportioning further comprising: 

means for requesting one or more subnet from said global IP address pool if 
utilization of said local IP address pool exceeds a first threshold, said one or 
more subnet having a size that is relative to a current subnet size; and 

means for releasing one or more subnet to said global IP address pool if 

utilization of said local IP address pool falls below a second threshold, said 
one or more subnet having a size that is relative to said current subnet size; 
means for inserting a route summary for a received one or more subnet and 

requesting one or more subnet if the size of said received one or more subnet is 

less than the size of said requested one or more subnet; 
means for inserting a route summary for said received one or more subnet if the size 

of said received one or more subnet equals the size of said requested one or 

more subnet; 

means for inserting a route summary for said received one or more subnet if the size 
of said received one or more subnet is greater than the size of said requested one 
or more subnet and if the resulting local IP address pool utilization falls below 
said second threshold; and 

means for rejecting said received one or more subnet and requesting one or more 
subnet if the size of said received one or more subnet is greater than the size of 
said requested one or more subnet and if the resulting local IP address pool 
utilization does not fall below said second threshold. 
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54. (New) An apparatus for on-demand management ofMernet Protocol (IP) address 
pools, the apparaUis comprising: 

an allocator to allocate an unused IP address from a local IP address pool designated 
for a remote domain if a request to connect to said remote domain is received, 
said local IP address pool comprising one or more of at least one subnet 
obtained from a global IP address pool, each of said at least one subnet 
specifying a contiguous set of one or more IP addresses, said allocator coupled 
to said local IP address pool; 
a deallocator to deallocate an IP address back to said local IP address pool if said IP 

address is unused, said deallocator coupled to said local IP address pool; 
a monitor to apportion one or more of said at least one subnet between said global IP 
address pool and said local IP address pool based upon utilization of said local 
IP address pool, said monitor coupled to said local IP address pool and a global 
IP address pool interface, said monitor comprising: 
a utilization assessor to assess utilization of said local IP address pool, said 

utilization assessor coupled to said local P address pool; 
a subnet requestor to request a subnet from said global IP address pool if 

utilization of said local IP address pool exceeds a first threshold, said subnet 
having a size that is relative to a current subnet size; 
a subnet receiver to receive said requested subnet and to forward said requested 
subnet to said local IP address pool, said subnet receiver coupled to said 
local IP address pool and said global IP address pool interface, said subnet 
having a size that is relative to said current subnet size, said subnet receiver 
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configured to: 

insert a route summary for a received one or more subnet and requesting 
one or more subnet if the size of said received one or more subnet is 
less than the size of said requested one or more subnet; 

insert a route summary for said received one or more subnet if the size of 
said received one or more subnet equals the size of said requested one 
or more subnet; 

insert a route summary for said received one or more subnet if the size of 
said received one or more subnet is greater than the size of said 
requested one or more subnet and if the resulting local IP address pool 
utilization falls below said second threshold; and 

reject said received one or more subnet and requesting one or more subnet if 
the size of said received one or more subnet is greater than the size of 
said requested one or more subnet and if the resulting local IP address 
pool utilization does not fall below said second threshold; and 
a subnet returner to retum a subnet to said local IP address pool if said 

utilization assessor indicates utilization of said local IP address pool is 

below a second threshold, said subnet returner coupled to said local IP 

address pool and said global IP address pool interface. 



22 of 39 



